Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/582bad98-ff7f-3a2f-9007-86b84d3877ca.roa
File:                     582bad98-ff7f-3a2f-9007-86b84d3877ca.roa (raw, json)
Hash identifier:          x8bnDS09NhQu6IWhk8GaT/0fdLtpwS6JridwTFy2Gh8=
Subject key identifier:   6E:C9:64:33:8F:B1:A5:F9:22:C1:4A:F0:07:99:B8:35:E2:4B:59:36
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328584043A10C64359DB14C18FC9EA0
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/582bad98-ff7f-3a2f-9007-86b84d3877ca.roa
Signing time:             Fri 16 Dec 2022 12:00:00 +0000
ROA not before:           Fri 16 Dec 2022 12:00:00 +0000
ROA not after:            Sat 21 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        18.160.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:43:a1:0c:64:35:9d:b1:4c:18:fc:9e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 16 12:00:00 2022 GMT
            Not After : Jan 21 05:00:00 2023 GMT
        Subject: CN=6edb5a70-de60-4220-b940-ba18f6857c67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:82:80:39:50:8d:e1:f1:18:50:50:e9:f7:5f:
                    34:5b:45:6b:11:b5:5d:e0:26:ba:c2:4e:66:d3:ac:
                    f5:2a:06:b5:db:bb:85:b0:75:c0:e6:79:17:e9:f7:
                    d0:c8:e0:bf:12:9a:9b:c1:ba:73:9b:c7:a6:49:93:
                    9d:96:cf:f1:a4:85:8c:54:87:29:38:d1:ec:bf:84:
                    5e:f4:5b:e0:23:ab:88:90:61:d1:32:dc:1a:32:58:
                    d7:59:06:2e:43:3e:87:18:10:1b:19:85:67:d7:23:
                    53:15:d7:38:1f:a2:dc:ac:75:a7:be:20:80:41:c5:
                    f4:1e:86:16:58:a1:f2:96:70:2b:f5:32:df:a2:53:
                    61:19:0f:bc:ff:cd:0f:ca:31:d1:9e:2b:5a:63:aa:
                    4b:2a:59:30:1a:80:20:7b:7f:37:10:cd:14:51:43:
                    62:8f:58:b4:ee:2c:15:68:ef:52:7c:a4:0c:7f:2e:
                    09:5e:06:9c:00:df:ca:12:82:2e:41:eb:21:ef:70:
                    3c:5e:db:94:f8:3d:e5:eb:90:d9:14:14:b8:83:eb:
                    b6:2a:50:bb:f6:a8:fd:c6:ed:9c:85:a1:7f:10:b9:
                    ea:df:01:4e:aa:0e:61:f8:b0:cb:f7:35:bc:30:82:
                    23:b2:c1:df:42:e3:6d:02:4e:c5:b2:28:c9:ee:46:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C9:64:33:8F:B1:A5:F9:22:C1:4A:F0:07:99:B8:35:E2:4B:59:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/582bad98-ff7f-3a2f-9007-86b84d3877ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  18.160.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:ac:31:79:5a:d7:65:5c:89:f2:e7:f5:f3:73:53:fd:a9:3f:
         cc:13:e0:bd:8d:34:9b:e4:32:3c:95:dc:62:8d:2d:0d:d0:74:
         83:17:98:c9:a5:44:b3:72:0d:15:0f:93:d0:fd:1a:54:82:a2:
         ee:4d:0e:a6:ab:d4:79:82:5a:6e:3b:6c:59:69:cf:ac:a6:00:
         b9:25:cd:41:0f:7a:7f:41:8b:d1:24:66:3c:cc:fe:eb:0f:36:
         d6:fe:df:14:83:4e:f1:00:40:2c:a8:97:e8:61:68:3f:17:d7:
         b5:51:f1:74:fb:25:1c:c2:d9:6d:18:a1:af:80:00:bc:74:2d:
         5a:fe:46:c2:30:7f:2c:50:d0:09:9b:e6:6b:b8:a2:05:97:ab:
         0d:8f:75:65:ed:2c:67:30:8c:91:98:9c:e0:69:ca:52:f2:e5:
         39:32:39:65:84:0e:ff:f5:db:f3:b8:06:bb:c3:d3:7d:14:a2:
         b4:86:41:d2:2f:65:fd:2e:04:0a:d0:de:e9:47:b3:fe:21:97:
         35:b3:52:51:67:64:6d:22:3b:96:5c:9f:4c:1c:13:7b:ed:86:
         f0:12:b4:ea:d4:1b:3c:ac:29:84:1a:84:08:90:f7:ec:1a:2d:
         9d:81:0d:e3:50:43:8d:a1:ce:2b:92:01:1f:76:99:38:f8:3a:
         20:ff:1b:f0
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEBDoQxkNZ2xTBj8nqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjQ5YmMxYTUtMWIyYi00OWU5LTkyYWMtZjUzZjdhMmQ0
NWZjMB4XDTIyMTIxNjEyMDAwMFoXDTIzMDEyMTA1MDAwMFowLzEtMCsGA1UEAxMk
NmVkYjVhNzAtZGU2MC00MjIwLWI5NDAtYmExOGY2ODU3YzY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIKAOVCN4fEYUFDp9180W0VrEbVd4Ca6wk5m
06z1Kga127uFsHXA5nkX6ffQyOC/Epqbwbpzm8emSZOdls/xpIWMVIcpONHsv4Re
9FvgI6uIkGHRMtwaMljXWQYuQz6HGBAbGYVn1yNTFdc4H6LcrHWnviCAQcX0HoYW
WKHylnAr9TLfolNhGQ+8/80PyjHRnitaY6pLKlkwGoAge383EM0UUUNij1i07iwV
aO9SfKQMfy4JXgacAN/KEoIuQesh73A8XtuU+D3l65DZFBS4g+u2KlC79qj9xu2c
haF/ELnq3wFOqg5h+LDL9zW8MIIjssHfQuNtAk7FsijJ7kbWUwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFG7JZDOPsaX5IsFK8AeZuDXiS1k2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDli
YzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNmN2EyZDQ1ZmMvNTgyYmFkOTgtZmY3Zi0z
YTJmLTkwMDctODZiODRkMzg3N2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjQ5YmMxYTUtMWIyYi00OWU5LTky
YWMtZjUzZjdhMmQ0NWZjLzI0OWJjMWE1LTFiMmItNDllOS05MmFjLWY1M2Y3YTJk
NDVmYy5jcmwwHwYDVR0jBBgwFoAU+DfCwcT8waLE3u/Fq0pmS78/tm0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNDliYzFhNS0xYjJiLTQ5ZTktOTJhYy1mNTNm
N2EyZDQ1ZmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMBEqAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtKwxeVrXZVyJ8uf183NT/ak/zBPgvY00m+QyPJXcYo0tDdB0gxeYyaVE
s3INFQ+T0P0aVIKi7k0OpqvUeYJabjtsWWnPrKYAuSXNQQ96f0GL0SRmPMz+6w82
1v7fFINO8QBALKiX6GFoPxfXtVHxdPslHMLZbRihr4AAvHQtWv5GwjB/LFDQCZvm
a7iiBZerDY91Ze0sZzCMkZic4GnKUvLlOTI5ZYQO//Xb87gGu8PTfRSitIZB0i9l
/S4ECtDe6Uez/iGXNbNSUWdkbSI7llyfTBwTe+2G8BK06tQbPKwphBqECJD37Bot
nYEN41BDjaHOK5IBH3aZOPg6IP8b8A==
-----END CERTIFICATE-----